Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7A6C2EC25611EF8DDF4959762E951A.roa
File: AE7A6C2EC25611EF8DDF4959762E951A.roa (raw, json)
Hash identifier: FxBicV8GR8+zD3yO8f+WfGlf6Ho1JGayEPOt+/72Rgk=
Subject key identifier: A9:88:03:FD:22:9F:35:32:DB:0D:C9:AF:02:2D:26:CD:07:71:16:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012339
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7A6C2EC25611EF8DDF4959762E951A.roa
Signing time: Wed 25 Dec 2024 00:25:02 +0000
ROA not before: Wed 25 Dec 2024 00:00:58 +0000
ROA not after: Wed 10 Dec 2025 00:00:58 +0000
asID: 984
IP address blocks: 154.199.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74553 (0x12339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:58 2024 GMT
Not After : Dec 10 00:00:58 2025 GMT
Subject: CN=676b50de-77ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:0b:3c:09:6f:5b:b6:b2:6e:f7:4c:fd:94:
0d:33:b5:08:4d:42:53:d7:7e:4b:0e:58:85:1d:84:
f8:c5:6b:0d:bb:38:87:9c:11:61:5c:d3:40:bc:fd:
0b:f4:a1:61:cb:61:b7:59:a3:27:14:e3:4b:c0:5d:
94:2d:30:3f:46:90:e1:a9:b5:9e:86:49:8a:cc:c1:
b0:e0:ff:d3:75:54:98:08:4d:32:e8:69:9b:9f:95:
3b:57:d2:04:8e:59:49:9e:29:86:e9:ac:07:b2:73:
fc:1f:53:01:12:5e:f8:57:4a:e4:46:34:1f:e3:2c:
cc:b3:94:a1:b3:aa:d5:1e:a7:c4:85:1c:e7:4e:0f:
d2:96:bc:8b:80:53:c4:fb:79:ab:1a:8e:23:9f:aa:
b1:f6:e4:2e:88:74:50:a2:17:5d:cf:c7:66:21:f2:
6c:1d:ea:a9:18:71:ce:2e:8d:b9:82:d6:02:7b:fa:
13:c4:2b:af:2f:37:68:29:b9:d7:22:86:b5:81:3a:
79:e2:d2:9c:d0:90:f5:6d:38:02:83:5a:f4:9b:3b:
96:66:1f:88:20:2c:a5:c4:39:92:1e:ad:1f:51:be:
b6:0a:8c:ab:48:1c:74:86:c4:f7:26:d1:ad:52:61:
88:00:88:eb:e8:96:64:12:e8:36:11:93:70:af:7a:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:03:FD:22:9F:35:32:DB:0D:C9:AF:02:2D:26:CD:07:71:16:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7A6C2EC25611EF8DDF4959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:eb:7c:a1:8b:0b:da:7a:e8:62:dc:1b:d2:f8:c5:cf:9d:a4:
cc:c6:fb:b1:b5:cd:73:ed:30:42:d9:63:d1:67:85:3c:e3:a1:
62:f8:e8:ca:df:5d:52:42:d8:f6:c6:44:fa:82:cc:99:65:b5:
35:07:b6:d1:c4:17:68:e0:c6:a3:47:6c:57:9c:dd:fc:67:94:
49:55:55:2d:91:57:77:b1:f2:f9:8e:57:e4:84:8d:7d:65:8a:
8b:1a:5d:5b:5e:10:84:13:00:62:24:8b:b9:4a:11:e8:f2:cb:
f5:e7:11:15:c1:61:ac:31:7d:41:b9:e9:18:87:2b:b8:a8:a7:
d2:c4:9e:18:af:17:97:db:d1:c7:92:79:d3:3d:c0:24:90:94:
69:bc:56:ff:af:52:26:a8:fc:65:17:6b:d7:75:f2:9e:fa:45:
de:30:e6:47:38:5e:cd:da:2b:11:0d:2c:b0:82:0c:33:4b:dc:
2c:a0:cd:cb:dc:22:83:88:b6:93:04:6e:8e:0a:af:f6:11:80:
75:67:1b:24:d0:45:0c:8d:8c:e3:ab:bb:bd:2a:26:9c:b7:60:
bb:d1:0f:87:db:05:50:7b:83:b8:e0:f8:38:b1:6f:48:69:69:
7a:fe:a6:b8:41:68:c6:2b:fc:54:42:7b:21:d5:ce:17:fc:dd:
db:e2:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client